VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current.
It is made by the FOSS community to improve and secure the open source software ecosystem.
git clone https://github.com/nexB/vulnerablecode.git && cd vulnerablecode
make envfile
docker-compose build
docker-compose up
docker-compose run vulnerablecode ./manage.py import --list
At this point, the VulnerableCode app should be running at port 8000
on your Docker host.
sudo apt-get install \
python3-venv python3-dev postgresql libpq-dev build-essential
git clone https://github.com/nexB/vulnerablecode.git && cd vulnerablecode
make dev envfile postgres
make test
make run
At this point, the VulnerableCode app should be running at port 8000
on your machine.
To run all importers and improvers use:
./manage.py import --all
./manage.py improve --all
Read more about VulnerableCode here: https://vulnerablecode.readthedocs.org/